News

Researchers from Niederrhein University and Ruhr-Universität Bochum (RUB) have discovered 14 new cross-site data leaks (XS-Leaks) attacks targetting a wide range of modern web browsers. The browsers affected include Microsoft Edge, Google Chrome, Opera, Apple Safari, Tor Browser, and Mozilla Firefox among many others. The researchers discovered the leaks by testing how well 56 browsers and operating systems were protected against 34 XS-Leaks. The researchers' website, XSinator.com, scanned the browsers for leaks and found that...

US military's hacking unit, Cyber Command, has taken offensive action to disrupt cybercriminal groups that have launched ransomware attacks on US companies, a spokesperson for the command confirmed to CNN Sunday.  

Security researchers tested nine popular WiFi routers and found they are riddled with vulnerabilities - even when running the latest firmware. In the nine models tested, a total of 226 vulnerabilities were found, the TP-Link Archer AX6000 and the Synology RT-2600ac resulting the most insecure, with 32 and 30 flaws, respectively. Conducted by IoT Inspector for the publication CHIP, the analysis found that in the most common vulnerabilities were: Outdated Linux kernel in the firmware...

IoT security firm, Armis, recently announced that it has closed its latest investment round and increased its valuation to $3.4 billion. One Equity Partners (“OEP”), in conjunction with existing investors, made a combined $300 million investment to accelerate strategic platform development and global GTM initiatives, and to support future acquisitions. OEP will also be joining the board of directors. “One Equity Partners is the exact type of investors we need at this juncture. They deeply...

PICCASO - which stands for "Privacy, InfoSec, Culture Change & Awareness Societal Organisation" - is a Special Interest Group (SIG) founded by CEO Steve Wright at Privacy Culture Limited June 2021,  with the driving purpose of opening conversations about why and how a culture of privacy should be embedded into organisations and be at the heart of privacy compliance & strategy. By discussing specialised privacy topics such as Culture, Behaviour, Change & Communication, and looking...

 Armis, the unified asset visibility and security platform provider, has formally announced its leadership in the OT / ICS cybersecurity category with the world’s leading enterprises after seeing a huge 400% increase in demand this past year. Only the Armis platform spans multiple verticals and can cater to the convergence of IT & OT. No other cybersecurity provider can secure OT, ICS, IT, IoT, IIoT & IoMT across multiple industries and sectors. Armis was rated...

Digital identities are significantly increasing on a global scale, One Identity reveals in their global survey findings, which were published today. This phenomenon – known as identity sprawl – has been driven by surges in user identities (internal, third parties, and customers), machine identities and new accounts generated in response to an uptick in remote work. More than 8 in 10 respondents indicated that identities managed has more than doubled, and 25% reported a 10X increase during...

Papua New Guinea’s finance department acknowledged late Thursday that its payment system, which manages access to hundreds of millions of dollars in foreign aid money, was hit with a ransomware attack. The attack on the Department of Finance’s Integrated Financial Management System (IFMS) occurred at 1 a.m. local time on Oct. 22, according to a statement released by John Pundari, finance minister and acting treasurer, Bloomberg reported. Commenting on the news, Robert Golladay, EMEA and...

Edgescan, the provider or fullstack vulnerability management, has released its Q3 Vulnerability Snapshot, a new, brief report showing the current vulnerability landscape based on thousands of assessments performed globally. Compiled by Eoin Keary, CEO of Edgescan, the report's findings highlight the variability when it comes to cybercriminals' favourite vulnerabilities to exploit. Looking at this quarterly report, we can already tell that the 2022 Vulnerability Satistics Report will highlight an every changing attack surface and once...

The Amazon-owned video game streaming platform Twitch has exposed roughly 135 gigabytes of data, revealing source code and payout figures for streamers. Twitch confirmed the leak after the data was advertised on 4chan. Here's what cybersecurity experts had to say on the matter: Javvad Malik, lead security awareness advocate, KnowBe4 The Twitch breach is a large one and contains some potentially very sensitive information relating to some of its streamers. Changing passwords, especially if the...